PT-2026-67071 · WordPress · User Profile Builder
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
User Profile Builder versions prior to 3.16.4
Description
An issue exists where the automatic login process following user registration is not correctly bound to the newly created account. This allows unauthenticated attackers to obtain an authenticated session for any existing user, including administrators, on sites utilizing a supported but non-default configuration.
Recommendations
Update User Profile Builder to version 3.16.4 or later.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
User Profile Builder